# NoName Mesh Network -- Complete File Tree

**Document Version:** 1.1.0
**Last Updated:** 2026-06-18
**Classification:** Infrastructure Documentation
**Scope:** 8-node production mesh network (Node 007/Email decommissioned, Node 009/Payment added 2026-07-01)

> **2026-06-18 Audit Changes:** `auth.css` added (new, 9.5 KB). 14 stale `.bak` files removed from `/var/www/dashboard/`. `/opt/cleanpharma/` archived to `/opt/cleanpharma.decommissioned.20260618`. `checkout.handler.php` rewired to `PaymentBridge::submit()`. Order prefix changed `CE-` → `NN-`.

---

## Table of Contents

01. [Node Overview](#node-overview)
02. [Node 001 -- DNS (p3plcpnl0842)](#node-001--dns-p3plcpnl0842)
03. [Node 002 -- PROXY (srv244939.hostlocal.net)](#node-002--proxy-srv244939hostlocalnet)
04. [Node 003 -- FILTER (s1.devtools.net)](#node-003--filter-s1devtoolsnet)
05. [Node 004 -- SHIELD (vps-82a41f.hosted-by.app)](#node-004--shield-vps-82a41fhosted-byapp)
06. [Node 005 -- ORIGIN (customer-558201.1984.is)](#node-005--origin-customer-55820119842is)
07. [Node 006 -- ENGINE (srv1653421.hstgr.cloud)](#node-006--engine-srv669427hstgrcloud)
08. [Node 007 -- EMAIL (mail.cleanpharma.cc)](#node-007--email-mailcleanpharmacc)
09. [Special Directories](#special-directories)
10. [File Permission Reference](#file-permission-reference)
11. [Deployment Paths Reference](#deployment-paths-reference)

---

## Node Overview

| Registry ID | Internal ID | Role    | Hostname                    | OS              | Provider     | Special Attributes |
|-------------|-------------|---------|-----------------------------|-----------------|--------------|-----------|
| 001         | 199335      | DNS     | p3plcpnl0842                | Ubuntu 24.04.4  | NJA.LA       | ns1/ns2 manager    |
| 002         | 244939      | PROXY   | srv244939.hostlocal.net     | AlmaLinux 9.7   | Cloudzy      | Edge cache |
| 003         | 333941      | FILTER  | s1.devtools.net             | AlmaLinux 9.8   | AlexHost     | NFTables/WAF |
| 004         | 414342      | SHIELD  | vps-82a41f.hosted-by.app    | AlmaLinux 9.7   | HostSailor   | WG Hub |
| 005         | 558201      | ORIGIN  | customer-558201.1984.is     | AlmaLinux 9.8   | 1984.hosting | Store DB + PHP-FPM |
| 006         | 669427      | ENGINE  | srv1653421.hstgr.cloud       | AlmaLinux 9.8   | Hostinger    | C++ Brain |
| 007         | 714820      | PAYMENT | srv156742.hosttoname.com    | AlmaLinux 9.6   | BlueVPS      | Stripe Bridge |
| 008         | 869377      | VAULT   | vps-c91b28.cloudzy.com      | AlmaLinux 9.7   | Cloudzy      | Credential Authority |

---

## Node 001 -- DNS (margit)

**Hostname:** margit
**Role:** DNS resolution and mesh name services
**OS:** Ubuntu 24.04

```
/
|-- etc/
|   |-- systemd/
|   |   |-- resolved.conf
|   |   |-- resolved.conf.d/
|   |   |   |-- mesh-dns.conf
|   |   |   `-- cleanpharma-dns.conf
|   |   `-- system/
|   |       |-- mesh-dns.service
|   |       `-- systemd-resolved.service.d/
|   |           `-- override.conf
|   |-- netplan/
|   |   `-- 00-installer-config.yaml
|   |-- hosts
|   |-- hostname
|   |-- hosts.mesh            # Mesh node host entries
|   |-- resolv.conf           # Points to 127.0.0.53
|   `-- resolv.conf.mesh      # Backup of upstream resolvers
|-- var/
|   |-- lib/
|   |   `-- systemd/
|   |       `-- random-seed
|   `-- log/
|       `-- mesh-dns.log
|-- usr/
|   `-- local/
|       `-- bin/
|           `-- mesh-dns-sync.sh
|-- run/
|   `-- systemd/
|       `-- resolve/
|           |-- resolv.conf
|           `-- stub-resolv.conf
|-- boot/
|   |-- grub/
|   |   `-- grub.cfg
|   |-- initrd.img
|   `-- vmlinuz
`-- root/
    `-- .ssh/
        |-- authorized_keys
        `-- known_hosts
```

---

## Node 002 -- PROXY (srv244939.hostlocal.net)

**Hostname:** srv244939.hostlocal.net
**Role:** Reverse proxy and traffic ingress
**OS:** Alma Linux 9

```
/
|-- etc/
|   |-- nginx/
|   |   |-- nginx.conf
|   |   |-- conf.d/
|   |   |   |-- default.conf
|   |   |   |-- store.conf           # Public storefront upstream
|   |   |   |-- dashboard.conf       # Admin dashboard upstream
|   |   |   |-- api.conf             # API endpoint upstream
|   |   |   |-- mesh-proxy.conf      # Inter-node mesh routing
|   |   |   `-- ssl-params.conf
|   |   |-- ssl/
|   |   |   |-- cleanpharma.cc.crt
|   |   |   |-- cleanpharma.cc.key
|   |   |   `-- ca-bundle.crt
|   |   `-- snippets/
|   |       |-- security-headers.conf
|   |       |-- rate-limit.conf
|   |       `-- ssl-retry.conf
|   |-- systemd/
|   |   `-- system/
|   |       `-- nginx.service.d/
|   |           `-- override.conf
|   |-- hosts
|   `-- hostname
|-- var/
|   |-- log/
|   |   `-- nginx/
|   |       |-- access.log
|   |       |-- error.log
|   |       |-- store.access.log
|   |       |-- dashboard.access.log
|   |       `-- api.access.log
|   `-- cache/
|       `-- nginx/
|           |-- proxy_cache/
|           `-- fastcgi_cache/
|-- usr/
|   `-- local/
|       `-- bin/
|           |-- proxy-health.sh
|           `-- mesh-route-sync.sh
|-- run/
|   `-- nginx.pid
|-- etc/
|   `-- hosts
`-- root/
    `-- .ssh/
        |-- authorized_keys
        `-- known_hosts
```

---

## Node 003 -- FILTER (dev)

**Hostname:** dev
**Role:** Traffic filtering, WAF, and request sanitization
**OS:** Alma Linux 9

```
/
|-- etc/
|   |-- nginx/
|   |   |-- nginx.conf
|   |   |-- conf.d/
|   |   |   |-- filter.conf          # Main filtering rules
|   |   |   |-- waf-rules.conf       # WAF rule definitions
|   |   |   |-- ip-blocklist.conf    # Dynamic blocklist
|   |   |   |-- rate-limits.conf     # Rate limiting per endpoint
|   |   |   `-- bot-detection.conf   # Bot/scraping detection
|   |   |-- filters/
|   |   |   |-- sql-injection.rules
|   |   |   |-- xss.rules
|   |   |   |-- lfi-rfi.rules
|   |   |   |-- bad-ua.rules
|   |   |   `-- geo-block.rules
|   |   `-- modsecurity/
|   |       |-- modsecurity.conf
|   |       `-- crs/
|   |           `-- setup.conf
|   |-- systemd/
|   |   `-- system/
|   |       `-- nginx.service.d/
|   |           `-- override.conf
|   |-- hosts
|   `-- hostname
|-- var/
|   |-- log/
|   |   |-- nginx/
|   |   |   |-- access.log
|   |   |   |-- error.log
|   |   |   `-- blocked-requests.log
|   |   `-- filter/
|   |       |-- blocked-ips.log
|   |       |-- waf-triggered.log
|   |       `-- bot-captured.log
|   |-- cache/
|   |   `-- nginx/
|   |       `-- filter_cache/
|   `-- lib/
|       `-- filter/
|           |-- dynamic-blocklist.db
|           `-- geo-ip/
|               `-- GeoLite2-Country.mmdb
|-- usr/
|   `-- local/
|       `-- bin/
|           |-- filter-sync.sh
|           `-- blocklist-update.sh
|-- run/
|   `-- nginx.pid
`-- root/
    `-- .ssh/
        |-- authorized_keys
        `-- known_hosts
```

---

## Node 004 -- SHIELD (vps-82a41f.hosted-by.app)

**Hostname:** vps-82a41f.hosted-by.app
**Role:** Security shield, log aggregation, anomaly detection
**OS:** Alma Linux 9

```
/
|-- etc/
|   |-- nginx/
|   |   |-- nginx.conf
|   |   |-- conf.d/
|   |   |   |-- dashboard.conf       # Reverse proxy to ORIGIN dashboard
|   |   |   |-- mail-api.conf        # Reverse proxy to EMAIL node
|   |   |   `-- php-fpm.conf         # PHP-FPM upstream config
|   |   |-- ssl/
|   |   |   |-- cleanpharma.cc.crt
|   |   |   `-- cleanpharma.cc.key
|   |   `-- snippets/
|   |       `-- security-headers.conf
|   |-- systemd/
|   |   `-- system/
|   |       |-- sysd-engine.service
|   |       |-- n6-apache-tools.service
|   |       |-- nginx.service
|   |       `-- mesh-shield.service
|   |-- hosts
|   `-- hostname
|-- opt/
|   |-- ghost/
|   |   `-- tools/
|   |       |-- [9 encrypted tool categories]
|   |       |-- category_01/
|   |       |-- category_02/
|   |       |-- category_03/
|   |       |-- category_04/
|   |       |-- category_05/
|   |       |-- category_06/
|   |       |-- category_07/
|   |       |-- category_08/
|   |       `-- category_09/
|   `-- shield/
|       `-- config/
|           `-- shield.conf
|-- var/
|   |-- log/
|   |   |-- nginx/
|   |   |   |-- access.log
|   |   |   `-- error.log
|   |   |-- shield/
|   |   |   |-- anomaly.log
|   |   |   |-- alert.log
|   |   |   `-- correlation.log
|   |   `-- audit/
|   |       `-- security.log
|   |-- run/
|   |   `-- sysc-engine/
|   |       |-- sysc-engine.pid
|   |       `-- mesh-shield.pid
|   |-- lib/
|   |   `-- shield/
|   |       |-- signatures.db
|   |       |-- baseline.json
|   |       `-- rules/
|   |           |-- behavioral.rules
|   |           |-- threshold.rules
|   |           `-- heuristics.rules
|   `-- spool/
|       `-- shield/
|           `-- pending/
|-- usr/
|   `-- local/
|       `-- bin/
|           |-- coredump-handler.sh
|           |-- log_agg_svc.py
|           `-- shield-monitor.sh
|-- run/
|   `-- nginx.pid
|-- tmp/
|   `-- shield-scratch/
`-- root/
    `-- .ssh/
        |-- authorized_keys
        `-- known_hosts
```

---

## Node 005 -- ORIGIN (customer-558201.1984.is)

**Hostname:** customer-558201.1984.is
**Role:** Primary web origin -- public storefront, dashboard, shared libraries, private secrets
**OS:** Alma Linux 9
**Web Root:** `/var/www/`

```
/
|-- var/
|   |-- www/
|   |   |-- public/                           # Public storefront
|   |   |   |-- index.php
|   |   |   |-- robots.txt
|   |   |   |-- favicon.ico
|   |   |   |-- favicon.png
|   |   |   |-- api/
|   |   |   |   |-- index.php
|   |   |   |   |-- router.php
|   |   |   |   |-- purchase-bridge.php
|   |   |   |   |-- support-bridge.php
|   |   |   |   |-- create_orders.sql
|   |   |   |   |-- handlers/
|   |   |   |   |   |-- account.handler.php
|   |   |   |   |   |-- auth.handler.php
|   |   |   |   |   |-- callback.handler.php
|   |   |   |   |   |-- checkout.handler.php
|   |   |   |   |   |-- order.handler.php
|   |   |   |   |   |-- page.handler.php
|   |   |   |   |   |-- product.handler.php
|   |   |   |   |   |-- render.handler.php
|   |   |   |   |   |-- review.handler.php
|   |   |   |   |   |-- security.handler.php
|   |   |   |   |   |-- support.handler.php
|   |   |   |   |   |-- telemetry.handler.php
|   |   |   |   |   `-- trust.handler.php
|   |   |   |   |-- assets/
|   |   |   |   |   |-- css/
|   |   |   |   |   |   `-- core.css
|   |   |   |   |   |-- favicon.svg
|   |   |   |   |   |-- img/
|   |   |   |   |   |   `-- cleanearth_banner.png
|   |   |   |   |   `-- js/
|   |   |   |   |       |-- account-events.js
|   |   |   |   |       |-- anti-scrape.js
|   |   |   |   |       |-- bridge.js
|   |   |   |   |       |-- cart.js
|   |   |   |   |       |-- category-nav.js
|   |   |   |   |       |-- exclude.js
|   |   |   |   |       |-- faq-events.js
|   |   |   |   |       |-- fingerprint.js
|   |   |   |   |       |-- fraud-detect.js
|   |   |   |   |       |-- navigation.js
|   |   |   |   |       |-- payment-events.js
|   |   |   |   |       |-- policy-track.js
|   |   |   |   |       |-- product-cards.js
|   |   |   |   |       |-- product-events.js
|   |   |   |   |       |-- reviews-events.js
|   |   |   |   |       |-- router.js
|   |   |   |   |       |-- screenshot-protection.js
|   |   |   |   |       |-- telemetry.js
|   |   |   |   |       |-- track-events.js
|   |   |   |   |       |-- welcome-events.js
|   |   |   |   |       |-- welcome.js
|   |   |   |   |       |-- checkout/
|   |   |   |   |       |   |-- checkout.js
|   |   |   |   |       |   `-- payment.js
|   |   |   |   |       `-- inline/
|   |   |   |   |-- includes/
|   |   |   |   |   `-- rows/
|   |   |   |   |       |-- banner.php
|   |   |   |   |       |-- divider.php
|   |   |   |   |       |-- dual_cards.php
|   |   |   |   |       |-- dual_showcase.php
|   |   |   |   |       |-- product_grid.php
|   |   |   |   |       |-- quad_feature.php
|   |   |   |   |       `-- triple_feature.php
|   |   |   |   |-- modules/
|   |   |   |   |   |-- cart-drawer.php
|   |   |   |   |   |-- welcome.php
|   |   |   |   |   |-- account/
|   |   |   |   |   |   |-- my_reviews.php
|   |   |   |   |   |   |-- orders.php
|   |   |   |   |   |   |-- profile.php
|   |   |   |   |   |   |-- referrals.php
|   |   |   |   |   |   `-- support.php
|   |   |   |   |   |-- checkout/
|   |   |   |   |   |   |-- block_agree.php
|   |   |   |   |   |   |-- block_cart.php
|   |   |   |   |   |   |-- block_credit.php
|   |   |   |   |   |   |-- block_crypto.php
|   |   |   |   |   |   |-- block_etransfer.php
|   |   |   |   |   |   |-- block_shipping.php
|   |   |   |   |   |   |-- block_summary.php
|   |   |   |   |   |   |-- crypto.php
|   |   |   |   |   |   |-- etransfer.php
|   |   |   |   |   |   `-- stripe.php
|   |   |   |   |   `-- pages/
|   |   |   |   |       |-- account.php
|   |   |   |   |       |-- checkout.php
|   |   |   |   |       |-- exclude.php
|   |   |   |   |       |-- faq.php
|   |   |   |   |       |-- home.php
|   |   |   |   |       |-- payment.php
|   |   |   |   |       |-- privacy.php
|   |   |   |   |       |-- product.php
|   |   |   |   |       |-- reviews.php
|   |   |   |   |       |-- support.php
|   |   |   |   |       |-- terms.php
|   |   |   |   |       `-- track.php
|   |   |   |   |-- system/
|   |   |   |   |   |-- App.php
|   |   |   |   |   |-- auth.php
|   |   |   |   |   |-- csrf.php
|   |   |   |   |   |-- config.php
|   |   |   |   |   |-- db.php
|   |   |   |   |   |-- email_bridge.php
|   |   |   |   |   |-- encrypt.php
|   |   |   |   |   |-- image.php
|   |   |   |   |   |-- init.php
|   |   |   |   |   |-- labels.php
|   |   |   |   |   |-- obfuscate.php
|   |   |   |   |   |-- payment_bridge.php
|   |   |   |   |   |-- security.php
|   |   |   |   |   |-- store_secrets.php
|   |   |   |   |   |-- telemetry.php
|   |   |   |   |   `-- trust.php
|   |   |   |   `-- uploads/
|   |   |   |       |-- banners/
|   |   |   |       |   |-- account.png
|   |   |   |       |   `-- store.png
|   |   |   |       |-- logos/
|   |   |   |       |   `-- cleanpharma_logo.png
|   |   |   |       |-- products/
|   |   |   |       |   |-- var_1_quality_0_1780056387.jpg
|   |   |   |       |   |-- var_1_quality_1_1780056387.jpg
|   |   |   |       |   |-- var_1_quality_2_1780056387.jpg
|   |   |   |       |   |-- var_1_type_0_1780036499.jpg
|   |   |   |       |   |-- var_2_type_0_1780036605.jpg
|   |   |   |       |   `-- var_2_type_1_1780036605.jpg
|   |   |   |       `-- ui/
|   |   |   |           |-- logo_icon.png
|   |   |   |           `-- welcome_hero.png
|   |   |   |-- dashboard/                        # Admin dashboard
|   |   |   |   |-- index.php
|   |   |   |   |-- login.php
|   |   |   |   |-- login2.php
|   |   |   |   |-- login3.php
|   |   |   |   |-- logout.php
|   |   |   |   |-- api/
|   |   |   |   |   |-- bootstrap.php
|   |   |   |   |   |-- heartbeat.php
|   |   |   |   |   |-- mesh-api.php
|   |   |   |   |   |-- email/
|   |   |   |   |   |   `-- status.php
|   |   |   |   |   |-- fleet/
|   |   |   |   |   |   |-- commands.php
|   |   |   |   |   |   |-- node_cmd.php
|   |   |   |   |   |   |-- topology.php
|   |   |   |   |   |   |-- tunnels.php
|   |   |   |   |   |   `-- wg_status.php
|   |   |   |   |   |-- payments/
|   |   |   |   |   |   `-- etransfer_webhook.php
|   |   |   |   |   |-- store/
|   |   |   |   |   |   |-- add_block.php
|   |   |   |   |   |   |-- add_product.php
|   |   |   |   |   |   |-- blocks.php
|   |   |   |   |   |   |-- create_row.php
|   |   |   |   |   |   |-- delete_item.php
|   |   |   |   |   |   |-- delete_row.php
|   |   |   |   |   |   |-- deploy_pipeline.php
|   |   |   |   |   |   |-- inline_edit.php
|   |   |   |   |   |   |-- list_products.php
|   |   |   |   |   |   |-- manage.php
|   |   |   |   |   |   |-- page_blocks.php
|   |   |   |   |   |   |-- reorder_items.php
|   |   |   |   |   |   |-- reorder_rows.php
|   |   |   |   |   |   |-- resize_item.php
|   |   |   |   |   |   |-- row_wizard.php
|   |   |   |   |   |   |-- rows.php
|   |   |   |   |   |   |-- save_block.php
|   |   |   |   |   |   |-- toggle_style.php
|   |   |   |   |   |   `-- upload_image.php
|   |   |   |   |   |-- system/
|   |   |   |   |   |   |-- bridge.php
|   |   |   |   |   |   |-- engine_status.php
|   |   |   |   |   |   |-- heartbeat.php
|   |   |   |   |   |   |-- pulse.php
|   |   |   |   |   |   |-- search.php
|   |   |   |   |   |   `-- stream.php
|   |   |   |   |   `-- v1/
|   |   |   |   |       `-- index.php
|   |   |   |   |-- assets/
|   |   |   |   |   |-- css/
|   |   |   |   |   |   |-- auth.css                   # [NEW 2026-06-18] Login page styles (9.5 KB)
|   |   |   |   |   |   |-- credentials.css
|   |   |   |   |   |   |-- dashboard.css               # +1726 lines (Rule 20 extraction + utility classes)
|   |   |   |   |   |   |-- emails.css
|   |   |   |   |   |   |-- infrastructure.css
|   |   |   |   |   |   |-- logs-live.css
|   |   |   |   |   |   |-- mfa-setup.css
|   |   |   |   |   |   |-- money.css
|   |   |   |   |   |   |-- safety.css
|   |   |   |   |   |   `-- topology.css
|   |   |   |   |   |-- favicon.svg
|   |   |   |   |   |-- icons/
|   |   |   |   |   |   |-- admin.svg
|   |   |   |   |   |   |-- backup.svg
|   |   |   |   |   |   |-- console.svg
|   |   |   |   |   |   |-- delivery.svg
|   |   |   |   |   |   |-- devices.svg
|   |   |   |   |   |   |-- email.svg
|   |   |   |   |   |   |-- faq.svg
|   |   |   |   |   |   |-- fleet.svg
|   |   |   |   |   |   |-- intel.svg
|   |   |   |   |   |   |-- layout.svg
|   |   |   |   |   |   |-- logs.svg
|   |   |   |   |   |   |-- marketing.svg
|   |   |   |   |   |   |-- obfuscation.svg
|   |   |   |   |   |   |-- operator.svg
|   |   |   |   |   |   |-- overview.svg
|   |   |   |   |   |   |-- owner.svg
|   |   |   |   |   |   |-- power.svg
|   |   |   |   |   |   |-- settings.svg
|   |   |   |   |   |   |-- shield.svg
|   |   |   |   |   |   |-- star.svg
|   |   |   |   |   |   |-- store.svg
|   |   |   |   |   |   |-- support.svg
|   |   |   |   |   |   |-- topology.svg
|   |   |   |   |   |   |-- users.svg
|   |   |   |   |   |   |-- viewer.svg
|   |   |   |   |   |   `-- watchdog.svg
|   |   |   |   |   `-- js/
|   |   |   |   |       |-- ads_logic.js
|   |   |   |   |       |-- audit_logic.js
|   |   |   |   |       |-- block-wizard.js
|   |   |   |   |       |-- console.js
|   |   |   |   |       |-- creative_editor_logic.js
|   |   |   |   |       |-- creative_generator_logic.js
|   |   |   |   |       |-- creative_studio_logic.js
|   |   |   |   |       |-- dashboard.js
|   |   |   |   |       |-- editor_logic.js
|   |   |   |   |       |-- emails.js
|   |   |   |   |       |-- engine_panel.js
|   |   |   |   |       |-- fleet.js
|   |   |   |   |       |-- grid_logic.js
|   |   |   |   |       |-- image_studio_logic.js
|   |   |   |   |       |-- inbox_logic.js
|   |   |   |   |       |-- labels_printer_logic.js
|   |   |   |   |       |-- list_logic.js
|   |   |   |   |       |-- map_logic.js
|   |   |   |   |       |-- picking_logic.js
|   |   |   |   |       |-- profile_logic.js
|   |   |   |   |       |-- scanner_engine.js
|   |   |   |   |       |-- security.js
|   |   |   |   |       |-- terminal_logic.js
|   |   |   |   |       |-- topology.js
|   |   |   |   |       `-- inline/
|   |   |   |   |           |-- inline_01.js
|   |   |   |   |           |-- inline_02.js
|   |   |   |   |           |-- inline_03.js
|   |   |   |   |           |-- inline_04.js
|   |   |   |   |           |-- inline_05.js
|   |   |   |   |           |-- inline_06.js
|   |   |   |   |           |-- inline_07.js
|   |   |   |   |           |-- inline_08.js
|   |   |   |   |           |-- inline_09.js
|   |   |   |   |           |-- inline_10.js
|   |   |   |   |           |-- inline_11.js
|   |   |   |   |           `-- inline_12.js
|   |   |   |   |-- core/
|   |   |   |   |   |-- action_chain.php
|   |   |   |   |   |-- bootstrap.php
|   |   |   |   |   |-- canada_post_api.php
|   |   |   |   |   |-- color_master.php
|   |   |   |   |   |-- config.php
|   |   |   |   |   |-- crypto_fields.php
|   |   |   |   |   |-- events.php
|   |   |   |   |   |-- fleet_orchestrator.php
|   |   |   |   |   |-- helpers.php
|   |   |   |   |   |-- icons.php
|   |   |   |   |   |-- image_process.php
|   |   |   |   |   |-- meta_ads_api.php
|   |   |   |   |   |-- obf_registry.php
|   |   |   |   |   |-- payment_client.php
|   |   |   |   |   |-- service_secrets.php
|   |   |   |   |   |-- shield_relay.php
|   |   |   |   |   |-- tabs.php
|   |   |   |   |   |-- ui_renderer.php
|   |   |   |   |   `-- wallet_monitor.php
|   |   |   |   |-- migrations/
|   |   |   |   |   |-- migration_001.sql
|   |   |   |   |   |-- migration_002.sql
|   |   |   |   |   |-- migration_003.sql
|   |   |   |   |   |-- migration_004.sql
|   |   |   |   |   |-- migration_005.sql
|   |   |   |   |   |-- migration_006.sql
|   |   |   |   |   |-- migration_007.sql
|   |   |   |   |   |-- migration_008.sql
|   |   |   |   |   |-- migration_009.sql
|   |   |   |   |   |-- migration_010.sql
|   |   |   |   |   |-- migration_011.sql
|   |   |   |   |   `-- migration_012.sql
|   |   |   |   |-- modules/
|   |   |   |   |   |-- backups/
|   |   |   |   |   |-- content/
|   |   |   |   |   |-- emails/
|   |   |   |   |   |-- fleet/
|   |   |   |   |   |-- fulfillment/
|   |   |   |   |   |-- logs/
|   |   |   |   |   |-- marketing/
|   |   |   |   |   |-- mesh/
|   |   |   |   |   |-- money/
|   |   |   |   |   |-- orders/
|   |   |   |   |   |-- overview/
|   |   |   |   |   |-- security/
|   |   |   |   |   |-- settings/
|   |   |   |   |   |-- store/
|   |   |   |   |   |-- support/
|   |   |   |   |   |-- users/
|   |   |   |   |   `-- watchdog/
|   |   |   |   |-- security/
|   |   |   |   |   |-- audit_logger.php
|   |   |   |   |   |-- auth_chain.php
|   |   |   |   |   |-- csrf.php
|   |   |   |   |   |-- obfuscator.php
|   |   |   |   |   |-- pin_generator.php
|   |   |   |   |   |-- rbac.php
|   |   |   |   |   |-- request_signer.php
|   |   |   |   |   |-- secondary_token.php
|   |   |   |   |   `-- session_guard.js
|   |   |   |   |-- system/
|   |   |   |   |   |-- admin-auth.php
|   |   |   |   |   |-- bloom_trust.php
|   |   |   |   |   |-- canary_tokens.php
|   |   |   |   |   |-- chain_validator.php
|   |   |   |   |   |-- circuit_breaker.php
|   |   |   |   |   |-- database.php
|   |   |   |   |   |-- dead_man_switch.php
|   |   |   |   |   |-- delete.php
|   |   |   |   |   |-- email_deception.php
|   |   |   |   |   |-- ephemeral_tokens.php
|   |   |   |   |   |-- gateway_sync.php
|   |   |   |   |   |-- license.php
|   |   |   |   |   |-- login.php
|   |   |   |   |   |-- logout.php
|   |   |   |   |   |-- marketing_tables.sql
|   |   |   |   |   |-- merkle_anchor.php
|   |   |   |   |   |-- modify.php
|   |   |   |   |   |-- osint_enrichment.php
|   |   |   |   |   |-- post.php
|   |   |   |   |   |-- shadow_database.php
|   |   |   |   |   |-- store_wg_meta.php
|   |   |   |   |   `-- verify.php
|   |   |   |   `-- tabs/
|   |   |   |       |-- backups.php
|   |   |   |       |-- console.php
|   |   |   |       |-- devices.php
|   |   |   |       |-- emails.php
|   |   |   |       |-- faq.php
|   |   |   |       |-- fleet.php
|   |   |   |       |-- fulfillment.php
|   |   |   |       |-- logs.php
|   |   |   |       |-- marketing.php
|   |   |   |       |-- mesh_security.php
|   |   |   |       |-- money.php
|   |   |   |       |-- obfuscation.php
|   |   |   |       |-- overview.php
|   |   |   |       |-- reviews.php
|   |   |   |       |-- safety.php
|   |   |   |       |-- security.php
|   |   |   |       |-- settings.php
|   |   |   |       |-- store.php
|   |   |   |       |-- stores.php
|   |   |   |       |-- support.php
|   |   |   |       |-- threat_intel.php
|   |   |   |       |-- topology.php
|   |   |   |       |-- users.php
|   |   |   |       `-- watchdog.php
|   |   |   |-- shared/                             # Shared libraries
|   |   |   |   |-- config_loader.php
|   |   |   |   |-- credentials.php
|   |   |   |   |-- db.php
|   |   |   |   |-- encryption.php
|   |   |   |   |-- image_processor.php
|   |   |   |   |-- public_id.php
|   |   |   |   |-- request_signer.php
|   |   |   |   `-- status_codes.php
|   |   |   `-- private/                            # Private secrets
|   |   |       |-- db_root.secret
|   |   |       |-- db_app.secret
|   |   |       |-- db_engine.secret
|   |   |       |-- db_backup.secret
|   |   |       |-- credentials.enc
|   |   |       |-- credentials.enc.bak
|   |   |       |-- etransfer.secret.php
|   |   |       |-- p1a2y3m4_bridge.php
|   |   |       |-- payment_server_keys.php
|   |   |       |-- stripe.secret.php
|   |   |       |-- wallets.secret.php
|   |   |       |-- .env
|   |   |       `-- legal/
|   |   |           |-- agreement.enc.json
|   |   |           |-- exclude.enc.json
|   |   |           |-- faq.enc.json
|   |   |           |-- privacy.enc.json
|   |   |           |-- refunds.enc.json
|   |   |           |-- shipping.enc.json
|   |   |           |-- storefront.enc.json
|   |   |           `-- terms.enc.json
|   |   `-- log/
|   |       |-- nginx/
|   |       |   |-- access.log
|   |       |   `-- error.log
|   |       `-- php/
|   |           |-- php_errors.log
|   |           `-- store_debug.log
|   |-- log/
|   |   `-- messages
|   `-- lib/
|       |-- php/
|       |   `-- modules/
|       `-- mysql/
|-- etc/
|   |-- nginx/
|   |   |-- nginx.conf
|   |   |-- conf.d/
|   |   |   |-- store.conf
|   |   |   `-- dashboard.conf
|   |   `-- ssl/
|   |       |-- cleanpharma.cc.crt
|   |       `-- cleanpharma.cc.key
|   |-- php-fpm.d/
|   |   `-- www.conf
|   |-- hosts
|   |-- hostname
|   |-- systemd/
|   |   `-- system/
|   |       `-- nginx.service
|   |-- my.cnf.d/
|   |   `-- mysql-server.cnf
|   |-- ssl/
|   |   `-- private/
|   |       `-- ca-key.pem
|   `-- wireguard/
|       |-- wg0.conf
|       `-- keys/
|           |-- privatekey
|           `-- publickey
|-- usr/
|   `-- local/
|       `-- bin/
|           |-- store-backup.sh
|           `-- deploy-hook.sh
|-- run/
|   |-- nginx.pid
|   |-- php-fpm.pid
|   `-- mysqld/
|       `-- mysqld.sock
`-- root/
    `-- .ssh/
        |-- authorized_keys
        `-- known_hosts
```

---

## Node 006 -- ENGINE (srv1653421.hstgr.cloud)

**Hostname:** srv1653421.hstgr.cloud
**Role:** Core engine, payment processing, wallet management, AI inference
**OS:** Alma Linux 9

```
/
|-- usr/
|   `-- local/
|       `-- sbin/
|           |-- sysd-engine               # C++ binary, 296KB, hardened
|           |-- hello                     # Node init script
|           |-- s3rv1c3agent             # Command executor
|           |-- img-pipeline.sh           # Image processing pipeline
|           `-- se_client.sh             # Shared client functions
|-- opt/
|   |-- apache/
|   |   |-- tools/
|   |   |   |-- askmail
|   |   |   |-- cmdmail
|   |   |   |-- dbwrite
|   |   |   |-- getmail
|   |   |   |-- logmail
|   |   |   |-- mailcli
|   |   |   |-- mailctl
|   |   |   |-- paymail
|   |   |   |-- pollmail
|   |   |   |-- unmail
|   |   |   |-- svcbeat
|   |   |   |-- svcboot
|   |   |   |-- svccfg
|   |   |   |-- svcfile
|   |   |   |-- svcfw
|   |   |   |-- svclock
|   |   |   |-- svclog
|   |   |   |-- svcpass
|   |   |   |-- svcperm
|   |   |   |-- svcrotate
|   |   |   |-- svctrap
|   |   |   |-- mesh_heartbeat.sh
|   |   |   `-- mesh_report.sh
|   |   `-- engine/
|   |       |-- build-v2/
|   |       |   |-- Makefile
|   |       |   |-- src/
|   |       |   |   |-- main.cpp
|   |       |   |   |-- engine_core.cpp
|   |       |   |   |-- payment_processor.cpp
|   |       |   |   |-- wallet_manager.cpp
|   |       |   |   |-- mesh_client.cpp
|   |       |   |   |-- crypto_utils.cpp
|   |       |   |   |-- api_server.cpp
|   |       |   |   `-- event_loop.cpp
|   |       |   `-- include/
|   |       |       |-- engine_core.h
|   |       |       |-- payment_processor.h
|   |       |       |-- wallet_manager.h
|   |       |       |-- mesh_client.h
|   |       |       |-- crypto_utils.h
|   |       |       |-- api_server.h
|   |       |       |-- event_loop.h
|   |       |       `-- config.h
|   |       |-- config/
|   |       |   `-- delivery-routes.conf       # Stealth WG conf
|   |       |-- vault/
|   |       |   |-- encrypted/
|   |       |   |   |-- api_keys.vault
|   |       |   |   |-- db_creds.vault
|   |       |   |   |-- payment_providers.vault
|   |       |   |   |-- wallet_keys.vault
|   |       |   |   |-- mesh_keys.vault
|   |       |   |   |-- stripe_secrets.vault
|   |       |   |   |-- crypto_secrets.vault
|   |       |   |   |-- etransfer_secrets.vault
|   |       |   |   |-- email_secrets.vault
|   |       |   |   `-- engine_config.vault
|   |       |   |-- securevault.sh
|   |       |   `-- fetch-vault-key.sh
|   |       `-- wallets/
|   |           |-- primary
|   |           |-- primary.keys
|   |           |-- .wallet_pass
|   |           |-- start-rpc.sh
|   |           |-- tron/
|   |           |   |-- config.json
|   |           |   |-- .privkey
|   |           |   |-- start-tron.sh
|   |           |   `-- tron-signer/
|   |           |       |-- signer.php
|   |           |       `-- tronweb.js
|   |           `-- monero/
|   |               `-- wallet.conf
|   `-- sysc/
|       `-- engine/
|           `-- config/
|               `-- engine.json
|-- var/
|   |-- lib/
|   |   |-- sysc-engine/
|   |   |   `-- master.key                    # chmod 600, 32-byte hex
|   |   `-- ollama/
|   |       `-- models/
|   |           `-- mistral-7b/
|   |               |-- config.json
|   |               |-- tokenizer.json
|   |               `-- model.bin
|   |-- data/
|   |   |-- monero/
|   |   |   |-- lmdb/
|   |   |   |   |-- data.mdb
|   |   |   |   `-- lock.mdb
|   |   |   `-- wallet/
|   |   |       `-- main_wallet
|   |   `-- ollama/
|   |       `-- models/
|   |           `-- manifest/
|   |-- log/
|   |   |-- sysc-engine/
|   |   |   |-- engine.log
|   |   |   |-- payments.log
|   |   |   |-- wallet.log
|   |   |   |-- api.log
|   |   |   |-- mesh.log
|   |   |   `-- errors.log
|   |   |-- xmr/
|   |   |   |-- xmr-wallet-rpc.log
|   |   |   `-- monerod.log
|   |   |-- tron/
|   |   |   |-- tron-api.log
|   |   |   `-- tron-signer.log
|   |   `-- ollama/
|   |       `-- inference.log
|   |   `-- messages
|   `-- run/
|       `-- sysc-engine/
|           |-- engine.pid
|           |-- api.sock
|           `-- mesh.sock
|-- etc/
|   |-- systemd/
|   |   `-- system/
|   |       `-- sysd-engine.service
|   |-- hosts
|   |-- hostname
|   |-- hosts.mesh
|   `-- wireguard/
|       |-- wg0.conf
|       `-- keys/
|           |-- privatekey
|           `-- publickey
|-- tmp/
|   `-- engine-scratch/
|       |-- payment-processing/
|       |-- image-pipeline/
|       `-- inference-cache/
`-- root/
    `-- .ssh/
        |-- authorized_keys
        `-- known_hosts
```

---

## Node 007 -- EMAIL (mail.cleanpharma.cc)

**Hostname:** mail.cleanpharma.cc
**Role:** Email services, mail relay, automated mail handling
**OS:** Alma Linux 9

```
/
|-- etc/
|   |-- postfix/
|   |   |-- main.cf
|   |   |-- master.cf
|   |   |-- virtual
|   |   |-- virtual.db
|   |   |-- transport
|   |   |-- transport.db
|   |   |-- access
|   |   |-- access.db
|   |   |-- helo_access
|   |   |-- helo_access.db
|   |   |-- sender_access
|   |   |-- sender_access.db
|   |   `-- sasl/
|   |       `-- smtpd.conf
|   |-- dovecot/
|   |   |-- dovecot.conf
|   |   |-- conf.d/
|   |   |   |-- 10-auth.conf
|   |   |   |-- 10-mail.conf
|   |   |   |-- 10-master.conf
|   |   |   |-- 10-ssl.conf
|   |   |   |-- 15-mailboxes.conf
|   |   |   |-- 20-imap.conf
|   |   |   |-- 20-lmtp.conf
|   |   |   |-- 90-plugin.conf
|   |   |   `-- auth-system.conf.ext
|   |   `-- dovecot-sql.conf.ext
|   |-- opendkim/
|   |   |-- opendkim.conf
|   |   |-- keys/
|   |   |   `-- cleanpharma.cc/
|   |   |       |-- mail.private
|   |   |       `-- mail.txt
|   |   |-- KeyTable
|   |   |-- SigningTable
|   |   |-- TrustedHosts
|   |   `-- opendkim.sock
|   |-- nginx/
|   |   |-- nginx.conf
|   |   `-- conf.d/
|   |       |-- mail-api.conf            # REST API for mail operations
|   |       `-- webmail.conf             # Webmail if applicable
|   |-- systemd/
|   |   `-- system/
|   |       |-- postfix.service
|   |       |-- dovecot.service
|   |       |-- opendkim.service
|   |       `-- mesh-mail-relay.service
|   |-- hosts
|   `-- hostname
|-- var/
|   |-- mail/
|   |   `-- vhosts/
|   |       `-- cleanpharma.cc/
|   |           |-- support/
|   |           |   |-- cur/
|   |           |   |-- new/
|   |           |   |-- tmp/
|   |           |   `-- dovecot.index.log
|   |           |-- orders/
|   |           |   |-- cur/
|   |           |   |-- new/
|   |           |   `-- tmp/
|   |           |-- noreply/
|   |           |   |-- cur/
|   |           |   |-- new/
|   |           |   `-- tmp/
|   |           |-- abuse/
|   |           |   |-- cur/
|   |           |   |-- new/
|   |           |   `-- tmp/
|   |           `-- compliance/
|   |               |-- cur/
|   |               |-- new/
|   |               `-- tmp/
|   |-- spool/
|   |   |-- postfix/
|   |   |   |-- incoming/
|   |   |   |-- active/
|   |   |   |-- deferred/
|   |   |   |-- bounce/
|   |   |   |-- corrupt/
|   |   |   |-- flush/
|   |   |   |-- hold/
|   |   |   |-- maildrop/
|   |   |   `-- pid/
|   |   |       `-- master.pid
|   |   `-- mailrelay/
|   |       `-- queue/
|   |-- log/
|   |   |-- maillog
|   |   |-- mail.log
|   |   |-- nginx/
|   |   |   |-- access.log
|   |   |   `-- error.log
|   |   |-- opendkim/
|   |   |   `-- opendkim.log
|   |   `-- mesh/
|   |       `-- mail-relay.log
|   |   `-- messages
|   `-- lib/
|       `-- mailrelay/
|           |-- auto-responder.db
|           |-- alias-map.json
|           |-- domain-rules/
|           |   `-- cleanpharma.cc.rules
|           `-- templates/
|               |-- order-confirmation.txt
|               |-- order-shipped.txt
|               |-- support-auto.txt
|               |-- password-reset.txt
|               |-- welcome.txt
|               |-- payment-received.txt
|               `-- compliance-notice.txt
|-- opt/
|   `-- mailrelay/
|       |-- bin/
|       |   |-- queue-manager
|       |   |-- auto-responder
|       |   |-- bounce-handler
|       |   |-- dkim-signer
|       |   `-- mesh-mail-sync
|       `-- config/
|           `-- relay.conf
|-- usr/
|   `-- local/
|       `-- bin/
|           |-- mail-health.sh
|           `-- queue-stats.sh
|-- run/
|   |-- postfix/
|   |   |-- master.pid
|   |   `-- private/
|   |-- dovecot/
|   |   |-- master.pid
|   |   `-- auth-userdb
|   |   `-- login/
|   |       |-- imap
|   |       `-- pop3
|   |-- opendkim/
|   |   `-- opendkim.sock
|   `-- nginx.pid
|-- tmp/
|   `-- mail-scan/
|       |-- incoming/
|       `-- quarantine/
`-- root/
    `-- .ssh/
        |-- authorized_keys
        `-- known_hosts
```

---

## Special Directories

| Directory | Node(s) | Purpose | Notes |
|---|---|---|---|
| `/var/www/public/` | 005 (ORIGIN) | Public-facing storefront | Serves customer-facing e-commerce site |
| `/var/www/dashboard/` | 005 (ORIGIN) | Admin dashboard | Role-based access, 24+ tabs |
| `/var/www/shared/` | 005 (ORIGIN) | Shared PHP libraries | Cross-module utilities |
| `/var/www/private/` | 005 (ORIGIN) | Encrypted secrets | DB creds, payment keys, legal docs |
| `/opt/apache/engine/` | 006 (ENGINE) | Engine build + vault | C++ source, encrypted vault, wallets |
| `/opt/apache/tools/` | 006 (ENGINE) | 25 CLI tools | Mail, service, and mesh tooling |
| `/opt/ghost/tools/` | 004 (SHIELD) | 9 encrypted tool categories | Security analysis tools |
| `/var/lib/sysc-engine/` | 006 (ENGINE) | Master key storage | chmod 600, 32-byte hex |
| `/var/data/monero/` | 006 (ENGINE) | Monero blockchain | XMR wallet daemon data |
| `/var/data/ollama/` | 006 (ENGINE) | Mistral 7B model | Local AI inference |
| `/var/mail/vhosts/` | 007 (EMAIL) | Virtual mailboxes | Per-domain mail storage |
| `/var/spool/postfix/` | 007 (EMAIL) | Mail queue | Deferred, active, incoming |
| `/etc/wireguard/` | All Alma nodes | Mesh VPN | wg0.conf per node |

---

## File Permission Reference

| Path | Owner | Permissions | Description |
|---|---|---|---|
| `/var/www/public/` | nginx:nginx | 755 | Public web root |
| `/var/www/private/` | root:root | 700 | Secret files -- no group/other access |
| `/var/www/private/*.secret` | root:root | 600 | Credential files |
| `/var/www/private/.env` | root:root | 600 | Environment secrets |
| `/var/lib/sysc-engine/master.key` | root:root | 600 | 32-byte hex engine key |
| `/opt/apache/engine/wallets/.wallet_pass` | root:root | 600 | Wallet passphrase |
| `/opt/ghost/tools/` | root:root | 700 | Encrypted security tools |
| `/usr/local/sbin/sysd-engine` | root:root | 755 | Hardened C++ binary (disguised) |
| `/var/mail/vhosts/` | dovecot:dovecot | 755 | Virtual mail spool |
| `/etc/wireguard/wg0.conf` | root:root | 600 | WireGuard private key |

---

## Deployment Paths Reference

| Component | Source Path | Target Node | Target Path | Deploy Method |
|---|---|---|---|---|
| Public Storefront | `var/www/public/` | 005 (ORIGIN) | `/var/www/public/` | SCP / Pipeline |
| Dashboard | `var/www/dashboard/` | 005 (ORIGIN) | `/var/www/dashboard/` | SCP / Pipeline |
| Shared Libraries | `var/www/shared/` | 005 (ORIGIN) | `/var/www/shared/` | SCP / Pipeline |
| Secrets | `var/www/private/` | 005 (ORIGIN) | `/var/www/private/` | Encrypted vault deploy |
| Engine Binary | `opt/apache/engine/build-v2/` | 006 (ENGINE) | `/usr/local/sbin/sysd-engine` | Compiled + SCP |
| Engine Vault | `opt/apache/engine/vault/` | 006 (ENGINE) | `/opt/apache/engine/vault/` | Secure vault sync |
| Engine Tools | `opt/apache/tools/` | 006 (ENGINE) | `/opt/apache/tools/` | SCP |
| Wallet Data | `opt/apache/engine/wallets/` | 006 (ENGINE) | `/opt/apache/engine/wallets/` | Secure transfer |
| Shield Tools | `opt/ghost/tools/` | 004 (SHIELD) | `/opt/ghost/tools/` | Encrypted sync |
| Nginx Configs | `etc/nginx/conf.d/` | 004 (SHIELD) | `/etc/nginx/conf.d/` | SCP + reload |
| Mail Configs | `etc/postfix/` / `etc/dovecot/` | 007 (EMAIL) | `/etc/postfix/` / `/etc/dovecot/` | SCP + reload |

---

*End of Document*
